PT-2004-1633 · Squirrelmail · Squirrelmail

Roman Medina · Publicado 2004-06-03 · Atualizado 2017-10-11 · CVE-2004-0521

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.3 RC1

Description The issue allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via the "abook database.php" endpoint.

Recommendations For versions prior to 1.4.3 RC1, update to version 1.4.3 RC1 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2004-0521

DSA-535

RHSA-2004:240

Produtos afetados

Squirrelmail

Referências · 22

• http://rhn.redhat.com/errata/RHSA-2004-240.html · Aviso do Fabricante
• http://ciac.org/ciac/bulletins/o-212.shtml · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1033 · Nota
• http://marc.info/?l=squirrelmail-cvs&m=108309375029888 · Nota
• http://secunia.com/advisories/11686 · Nota
• http://securityfocus.com/advisories/6827 · Aviso do Fabricante
• http://marc.info/?l=squirrelmail-cvs&m=108532891231712 · Nota
• http://secunia.com/advisories/11685 · Nota
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858 · Aviso do Fabricante
• http://securityfocus.com/advisories/7148 · Aviso do Fabricante
• http://osvdb.org/6841 · Nota
• http://securityfocus.com/bid/10397 · Aviso do Fabricante
• http://debian.org/security/2004/dsa-535 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16235 · Nota
• ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc · Aviso do Fabricante